Senior SOC Analyst (Tier 2) – Remote Incident Response

CyberClan; Australia; Remote; CAD 85,000 - 95,000; Full time

Job summary

CyberClan is seeking a T2 SOC Analyst to investigate and respond to security incidents across client environments. You will leverage SIEM, EDR, threat intelligence, and other technologies to identify, contain, and resolve threats within a 24x7 team.

The role requires willingness to work shifts including unsociable hours and bank holidays. You will work closely with SOC leadership and senior analysts to improve detection and response capabilities.

Qualifications

• 3+ years in a SOC, security operations, incident response, or security monitoring.
• Experience creating and executing searches in SIEM platforms.
• Strong understanding of SOC workflows, alert triage, and incident escalation.
• Hands-on with SIEM and endpoint security tools to investigate events.
• Ability to assess risk, prioritize investigations, and escalate as needed.

Responsibilities

• Perform Tier 2 triage and investigate escalated security alerts from SIEM, EDR/XDR, and related tools.
• Correlate events across data sources to classify activity and determine incidents.
• Lead investigations across diverse client environments with SLA adherence.
• Apply MITRE ATT&CK framework to describe tactics and techniques observed.
• Document steps, findings and actions clearly in the ticketing system.
• Provide updates to stakeholders and mentor Tier 1 analysts.
• Coordinate incident response activities and handoffs to IR teams.

Skills

SOC experience

SIEM

Incident response

Log analysis

Threat intel

MITRE ATT&CK

Team guidance

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Microsoft Sentinel

Splunk

QRadar

Defender XDR

CrowdStrike

Trend Vision One

Sentinel One

Job description

CyberClan is seeking a T2 SOC Analyst to investigate and respond to security incidents across client environments. You will leverage SIEM, EDR, threat intelligence, and other technologies to identify, contain, and resolve threats within a 24x7 team.

The role requires willingness to work shifts including unsociable hours and bank holidays. You will work closely with SOC leadership and senior analysts to improve detection and response capabilities.